@tangle-network/agent-runtime 0.259.0 → 0.261.0

package/dist/{substrate-BToFBpfh.d.ts → substrate-CxwdhZri.d.ts}

@@ -1,4 +1,4 @@
-import { Hr as AgentRunSpec, Wr as Driver, di as OutputAdapter, gi as Validator } from "./types-ChewVlpE.js";
+import { Gr as Driver, Ur as AgentRunSpec, _i as Validator, fi as OutputAdapter } from "./types-DNCNRu0E.js";
 import { AgentProfile } from "@tangle-network/agent-interface";
 //#region src/profiles/coder.d.ts
 /**
@@ -281,4 +281,4 @@ interface UiFinding {
 }
 //#endregion
 export { CoderTask as _, UiFindingSeverity as a, KnowledgeUpdate as c, ResearchSource as d, ResearchTask as f, researcherProfile as g, multiHarnessResearcherFanout as h, UiFindingScreenshot as i, MultiHarnessResearcherFanoutOptions as l, createResearcherValidator as m, UI_LENSES as n, UiLens as o, ResearcherProfileOptions as p, UiFinding as r, KnowledgeItem as s, UI_FINDING_SEVERITIES as t, ResearchOutput as u, coderTaskToPrompt as v };
-//# sourceMappingURL=substrate-BToFBpfh.d.ts.map
+//# sourceMappingURL=substrate-CxwdhZri.d.ts.map

package/dist/{supervise-DsQjhLN-.js → supervise-1QzYAyS2.js}

@@ -1,10 +1,10 @@
-import { $i as resourceTelemetry, $r as readCommittedJsonLines, An as resolveAgentEnvironmentProvider, Br as profileMaterializationAxes$1, C as restoreScopeOwnerAcceptedExecution, F as prepareScopeRetainedOwnerTask, Fn as registerRetainedExecutorPreparation, Gi as sleep, Hr as promptModelProfileMaterialization, I as scopeRetainedOwnerContext, In as retainedExecutorSeamKey, Ir as assertProfileMaterialization, It as spendFromUsageTotals, Jr as unsupportedProfileDimensions, Kn as linkAbort, Kr as renderUnsupported, Kt as createInbox, L as scopeRetainedOwnerPriorSpend, Li as addSpend, Lr as controlProfileMaterialization, Lt as WORKER_TRACE_PROPAGATION, M as bindScopeRetainedOwnerEnvironmentId, N as bindScopeRetainedOwnerProvider, Nt as meterUsageEvent, P as consumeScopeRetainedOwnerResult, Pt as newUsageTotals, Qi as addResourceSpend, Qr as prepareJsonlAppend, R as scopeRetainedOwnerResourceReader, Rr as defineProfileMaterializationContract, S as recordScopeOwnerMaterialization, Si as detachedSnapshot, Sn as routerBrain, Vr as promptControlProfileMaterialization, Wn as RunCancellationReason, Xi as withTimeout, Xr as worktreeCliProfileMaterialization, Yi as unmeteredSpend, Zi as zeroSpend, Zr as isNoEntError, _ as beginScopeOwnerAttempt, _r as toOtelAttributes, ai as inheritRuntimeOwnedExecutorAttestation, an as bridgeModelRouteRefusal, at as bindReusableExecutorExecutionId, b as meterRuntimeOwnedAccounting, d as defaultUnmetContractSteer, di as runtimeOwnedDriveHarnessProviderEvidence, dn as bridgeStopSignalKey, dt as snapshotExecutorConfig, ea as withBudgetResources, er as contentAddress, et as errMessage, f as runDriverWithRetry, fi as runtimeOwnedExecutorExecutionBinding, gi as runtimeOwnedScopeOwnerRuntime, h as isDriverSpec, hi as runtimeOwnedPendingExecutorMaterialization, ia as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, in as bridgeAdmissionRefusal, jt as assertValidBudget, l as HarnessTurnFailedError, li as providerAttemptEvidence, lt as createExecutor, m as driverExecutorFactory, mi as runtimeOwnedExecutorProviderEvidence, n as createSupervisor, ni as attestRuntimeOwnedScopeOwner, o as runFinalizer, oa as teardownExecutor, ot as captureReusableExecutorConfig, p as driverChild, pi as runtimeOwnedExecutorMaterialization, pr as generateSpanId, qn as runAbortable, r as bestDelivered, rn as executorFailure, s as runTree, sa as teardownSurfaces, t as createRootHandle, ui as recordRuntimeOwnedDriveHarnessProviderEvidence, un as bridgeRuntimeAttachmentsKey, ur as createOtelExporter, w as scopeOwnerExecutorNodeContext, x as meterRuntimeOwnedProviderAttempt, y as deriveNodeExecutionIdentity, z as scopeRetainedOwnerResult, zr as fullProfileMaterialization } from "./supervisor-CJyzUjc7.js";
+import { $i as zeroSpend, B as scopeRetainedOwnerResult, Br as fullProfileMaterialization, C as recordScopeOwnerMaterialization, Cn as routerBrain, F as consumeScopeRetainedOwnerResult, Ft as newUsageTotals, Gn as RunCancellationReason, Hr as promptControlProfileMaterialization, I as prepareScopeRetainedOwnerTask, In as registerRetainedExecutorPreparation, Jn as runAbortable, L as scopeRetainedOwnerContext, Ln as retainedExecutorSeamKey, Lr as assertProfileMaterialization, Lt as spendFromUsageTotals, Mt as assertValidBudget, N as bindScopeRetainedOwnerEnvironmentId, P as bindScopeRetainedOwnerProvider, Pt as meterUsageEvent, Qi as withTimeout, Qr as isNoEntError, R as scopeRetainedOwnerPriorSpend, Rr as controlProfileMaterialization, Rt as WORKER_TRACE_PROPAGATION, S as meterRuntimeOwnedProviderAttempt, T as scopeOwnerExecutorNodeContext, Ur as promptModelProfileMaterialization, Vr as profileMaterializationAxes$1, Yr as unsupportedProfileDimensions, Zi as unmeteredSpend, Zr as worktreeCliProfileMaterialization, _ as assertRecursiveReservationPolicy, _i as runtimeOwnedPendingExecutorMaterialization, an as bridgeAdmissionRefusal, b as deriveNodeExecutionIdentity, ca as teardownExecutor, d as defaultUnmetContractSteer, di as providerAttemptEvidence, dn as bridgeRuntimeAttachmentsKey, dr as createOtelExporter, ea as addResourceSpend, ei as prepareJsonlAppend, f as runDriverWithRetry, fi as recordRuntimeOwnedDriveHarnessProviderEvidence, fn as bridgeStopSignalKey, ft as snapshotExecutorConfig, gi as runtimeOwnedExecutorProviderEvidence, h as isDriverSpec, hi as runtimeOwnedExecutorMaterialization, ii as attestRuntimeOwnedScopeOwner, in as executorFailure, jn as resolveAgentEnvironmentProvider, l as HarnessTurnFailedError, la as teardownSurfaces, m as driverExecutorFactory, mi as runtimeOwnedExecutorExecutionBinding, mr as generateSpanId, n as createSupervisor, na as withBudgetResources, o as runFinalizer, oa as DEFAULT_SUCCESSFUL_SHUTDOWN_MS, on as bridgeModelRouteRefusal, ot as bindReusableExecutorExecutionId, p as driverChild, pi as runtimeOwnedDriveHarnessProviderEvidence, qi as sleep, qn as linkAbort, qr as renderUnsupported, qt as createInbox, r as bestDelivered, s as runTree, si as inheritRuntimeOwnedExecutorAttestation, st as captureReusableExecutorConfig, t as createRootHandle, ta as resourceTelemetry, ti as readCommittedJsonLines, tr as contentAddress, tt as errMessage, ut as createExecutor, v as beginScopeOwnerAttempt, vi as runtimeOwnedScopeOwnerRuntime, vr as toOtelAttributes, w as restoreScopeOwnerAcceptedExecution, wi as detachedSnapshot, x as meterRuntimeOwnedAccounting, z as scopeRetainedOwnerResourceReader, zi as addSpend, zr as defineProfileMaterializationContract } from "./supervisor-yavsoQQo.js";
 import { f as RuntimeRunStateError, i as ConfigError, m as ValidationError } from "./errors-DodWX-cb.js";
 import { a as concreteProfileModel, c as profileModelExecutionSettings, d as agentHarness, f as harnessRunsAgent, n as assertModelAllowed, o as enforceTokenLimits, r as assertProfileModelsAllowed, s as profileBridgeWireModel, t as assertExecutableAgentProfile } from "./model-policy-BbSCSak0.js";
 import { t as composeRuntimeHooks } from "./runtime-hooks-tXpAarhW.js";
 import { n as assertNoSymlinkDescendant } from "./durable-file-DWQA4ooo.js";
 import { n as createStdioToolServer, t as PROTOCOL_VERSION } from "./tool-server-x9NEhvHZ.js";
-import { D as coordinationVerbNames, S as watchRunCancellation, c as createProgressTracker, d as progressStop, k as createCoordinationToolsForManager, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-BmtrkNPu.js";
+import { D as coordinationVerbNames, S as watchRunCancellation, c as createProgressTracker, d as progressStop, k as createCoordinationToolsForManager, n as createSteerAcknowledger, r as driverAgent, t as createCancelAcknowledger, v as createFileRunContext, w as DEFAULT_AWAIT_EVENT_TIMEOUT_MS, x as applyRunCancellation, y as createInMemoryRunContext } from "./coordination-driver-LmDxHvAO.js";
 import { k as writeRunCancellation, o as readRunCancelRequest, s as readRunCancellation } from "./run-layout-vwd4SwX_.js";
 import { agentProfileSchema, canonicalAgentProfileDigest, canonicalCandidateDigest, canonicalCandidateJson, validateAgentProfileSecurity } from "@tangle-network/agent-interface";
 import { createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
@@ -706,6 +706,7 @@ async function serveCoordinationMcpForManager(opts, lifetime) {
 		...opts.preflightSpawn ? { preflightSpawn: opts.preflightSpawn } : {},
 		...opts.resolveSpawnProfile ? { resolveSpawnProfile: opts.resolveSpawnProfile } : {},
 		...opts.composeSpawnProfile ? { composeSpawnProfile: opts.composeSpawnProfile } : {},
+		...opts.profiles ? { profiles: opts.profiles } : {},
 		...opts.spawnResourceRoot ? { spawnResourceRoot: opts.spawnResourceRoot } : {},
 		...ownerReader ? { spawnResourceReader: ownerReader } : {},
 		...opts.peerMail ? { peerMail: typeof opts.peerMail === "object" && opts.peerMail.limits ? { limits: opts.peerMail.limits } : {} } : {}
@@ -1685,6 +1686,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 			makeWorkerAgent: deps.makeWorkerAgent,
 			...deps.authorizeDownMessage ? { authorizeDownMessage: deps.authorizeDownMessage } : {},
 			perWorker: deps.perWorker,
+			...deps.preserveOwnerTurns ? { preserveOwnerTurns: true } : {},
 			systemPrompt: resolveSupervisorSystemPrompt(stableProfile) ?? "",
 			...deps.deliverable ? { deliverable: deps.deliverable } : {},
 			...deps.onAcceptedSubmission ? { onAcceptedSubmission: deps.onAcceptedSubmission } : {},
@@ -1703,6 +1705,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 			...deps.preflightSpawn ? { preflightSpawn: deps.preflightSpawn } : {},
 			...deps.resolveSpawnProfile ? { resolveSpawnProfile: deps.resolveSpawnProfile } : {},
 			...deps.composeSpawnProfile ? { composeSpawnProfile: deps.composeSpawnProfile } : {},
+			...deps.profiles ? { profiles: deps.profiles } : {},
 			...deps.spawnResourceRoot ? { spawnResourceRoot: deps.spawnResourceRoot } : {},
 			...deps.spawnResourceReader ? { spawnResourceReader: deps.spawnResourceReader } : {},
 			...deps.stopRule ? { stopRule: deps.stopRule } : {},
@@ -1803,6 +1806,7 @@ function buildSupervisorAgent(profile, deps, testBrain) {
 				...deps.preflightSpawn ? { preflightSpawn: deps.preflightSpawn } : {},
 				...deps.resolveSpawnProfile ? { resolveSpawnProfile: deps.resolveSpawnProfile } : {},
 				...deps.composeSpawnProfile ? { composeSpawnProfile: deps.composeSpawnProfile } : {},
+				...deps.profiles ? { profiles: deps.profiles } : {},
 				...deps.spawnResourceRoot ? { spawnResourceRoot: deps.spawnResourceRoot } : {},
 				...deps.spawnResourceReader ? { spawnResourceReader: deps.spawnResourceReader } : {},
 				...deps.peerMail ? { peerMail: deps.peerMail } : {},
@@ -3020,6 +3024,51 @@ function resolveNamed(option, table, value, registry) {
 	if (entry === void 0) throw new ConfigError(`supervise: opts.${option} = ${JSON.stringify(value)} is not in opts.registry.${table} — the table resolved no entry under that name`);
 	return entry;
 }
+/** Read the profiles table once, before anything is built or spent, and freeze what it returns.
+*  Every entry must parse as an AgentProfile (the schema refuses a credential written as a public
+*  value), be executable, use an allowed model, and carry its table name as `profile.name`.
+*  `assertMountable` applies the spawn path's own mount checks, so an entry that can never be
+*  mounted fails here instead of after a director spent a turn on it. A promoted entry's decision
+*  must promote, and a treatment arm of its sealed play must name the entry's canonical digest;
+*  the seal itself is verified by {@link verifyProfilePromotions}. An empty table is no table. */
+function snapshotProfileTable(table, allowedModels, assertMountable) {
+	if (table === void 0) return void 0;
+	if (typeof table.names !== "function" || typeof table.resolve !== "function") throw new ConfigError("supervise: opts.registry.profiles must implement resolve(name) and names(): a director can spawn only the names it is shown");
+	const entries = /* @__PURE__ */ new Map();
+	for (const name of table.names()) {
+		const at = `opts.registry.profiles ${JSON.stringify(name)}`;
+		if (typeof name !== "string" || name.trim().length === 0 || name !== name.trim()) throw new ConfigError(`supervise: ${at} is not a non-empty trimmed name`);
+		if (entries.has(name)) throw new ConfigError(`supervise: ${at} is listed twice`);
+		const entry = table.resolve(name);
+		if (entry === void 0) throw new ConfigError(`supervise: ${at} is listed, but the table resolved no entry under it`);
+		const parsed = agentProfileSchema.safeParse(entry.profile);
+		if (!parsed.success) throw new ValidationError(`supervise: ${at} is not a valid AgentProfile: ${parsed.error.message}`);
+		const profile = freezeDetached(parsed.data);
+		if (profile.name !== name) throw new ValidationError(`supervise: ${at} holds profile.name ${JSON.stringify(profile.name)}; a table entry is spawned and continued by its name, so the two must be equal`);
+		assertExecutableAgentProfile(profile, `supervise: ${at}`);
+		assertProfileModelsAllowed(profile, allowedModels);
+		assertMountable?.(profile, `supervise: ${at} would be refused at mount`);
+		const promotion = entry.promotion;
+		if (promotion !== void 0) {
+			if (promotion.decision?.promote !== true) throw new ValidationError(`supervise: ${at} cites a PairedPromotionDecision that did not promote; list it without promotion to run it as exploratory`);
+			const digest = canonicalAgentProfileDigest(profile);
+			if (!(promotion.experiment?.spec?.arms ?? []).some((arm) => arm.role === "treatment" && arm.profileDigest === digest)) throw new ValidationError(`supervise: ${at} cites sealed play ${JSON.stringify(promotion.experiment?.spec?.id)}, but no treatment arm of it names this profile's digest ${digest}`);
+		}
+		entries.set(name, Object.freeze({
+			profile,
+			...promotion === void 0 ? {} : { promotion: freezeDetached(promotion) }
+		}));
+	}
+	return entries.size === 0 ? void 0 : entries;
+}
+/** Verify the seal of every promoted profiles-table entry. Eval's seal check is asynchronous, so it
+*  runs at the start of the run, before the first model call; a broken seal refuses the run. */
+async function verifyProfilePromotions(table) {
+	const promoted = [...table ?? []].filter(([, entry]) => entry.promotion !== void 0);
+	if (promoted.length === 0) return;
+	const { verifySealedExperiment } = await import("@tangle-network/agent-eval/experiment");
+	for (const [name, entry] of promoted) if (!await verifySealedExperiment(entry.promotion.experiment)) throw new ValidationError(`supervise: opts.registry.profiles ${JSON.stringify(name)} cites a sealed play whose digest does not match its spec`);
+}
 const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"allowedModels",
 	"analysts",
@@ -3059,6 +3108,7 @@ const superviseOptionKeySet = /* @__PURE__ */ new Set([
 	"otel",
 	"peerMail",
 	"perWorker",
+	"reservationPolicy",
 	"probes",
 	"profileGuidance",
 	"profileSecurity",
@@ -3438,13 +3488,22 @@ function profileGuidanceComposer(guidance) {
 		return composed.data;
 	};
 }
+/**
+* The exact root profile `supervise` executes: `profile` parsed as an AgentProfile, with the
+* selected `profileGuidance` composed. The root's journaled `identity.profileDigest` is this
+* value's digest, so a reader that must match a recorded root derives it here, not by hand.
+*/
+function superviseRootProfile(profile, profileGuidance) {
+	const parsedProfile = agentProfileSchema.safeParse(profile);
+	if (!parsedProfile.success) throw new ValidationError(`supervise: invalid AgentProfile: ${parsedProfile.error.message}`);
+	const compose = profileGuidanceComposer(profileGuidance);
+	return freezeDetachedProfile(compose ? compose(parsedProfile.data) : parsedProfile.data);
+}
 function superviseInternal(profile, task, opts, testBrain) {
 	const options = captureSuperviseOptions(opts);
 	assertValidBudget(options.budget, "supervise budget");
-	const parsedProfile = agentProfileSchema.safeParse(profile);
-	if (!parsedProfile.success) throw new ValidationError(`supervise: invalid AgentProfile: ${parsedProfile.error.message}`);
 	const composeSpawnProfile = profileGuidanceComposer(options.profileGuidance);
-	const canonicalProfile = freezeDetachedProfile(composeSpawnProfile ? composeSpawnProfile(parsedProfile.data) : parsedProfile.data);
+	const canonicalProfile = superviseRootProfile(profile, options.profileGuidance);
 	assertExecutableAgentProfile(canonicalProfile, "supervise root");
 	const canonicalTask = freezeDetached(task);
 	if (options.makeWorkerAgent && options.authorizeSpawn) throw new ValidationError("supervise: authorizeSpawn cannot be combined with caller-owned makeWorkerAgent; use makeLeafAgent to override leaf execution inside the authorized path, or use backend-derived workers");
@@ -3472,12 +3531,18 @@ function superviseInternal(profile, task, opts, testBrain) {
 	const finalizer = resolveNamed("finalizer", "finalizers", options.finalizer, options.registry?.finalizers);
 	const analysts = resolveNamed("analysts", "analysts", options.analysts, options.registry?.analysts);
 	const probes = resolveNamed("probes", "probes", options.probes, options.registry?.probes);
+	const profileTable = snapshotProfileTable(options.registry?.profiles, options.allowedModels, options.makeWorkerAgent === void 0 && options.authorizeSpawn === void 0 ? (entry, context) => {
+		const security = validateAgentProfileSecurity(entry, options.profileSecurity ?? DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY);
+		if (!security.ok) throw new ValidationError(`${context}: ${security.issues.filter((issue) => issue.level === "error").map((issue) => `${issue.code}${issue.path ? ` at ${issue.path}` : ""}`).join(", ")}`);
+		if (options.backend !== void 0 && options.makeLeafAgent === void 0 && declaredRuntimeToolNames(entry).length === 0) assertBackendProfileMaterialization(entry, options.backend, context);
+	} : void 0);
 	assertCoordinationBinding(options.coordination);
 	const ctx = options.runDir !== void 0 ? createFileRunContext(options.runDir, { withDriver: true }) : createInMemoryRunContext({ withDriver: true });
 	const blobs = options.blobs ?? ctx.blobs;
 	const perWorker = options.perWorker ?? defaultPerWorker(options.budget);
 	assertValidBudget(perWorker, "supervise perWorker");
 	assertPerWorkerWithinPool(perWorker, options.budget);
+	assertRecursiveReservationPolicy(options.reservationPolicy, options.maxDepth ?? 8, options.maxLiveWorkers);
 	const journal = options.journal ?? ctx.journal;
 	const runId = options.runId ?? "supervise";
 	const runNamespace = supervisionRunNamespace(options.runDir, runId);
@@ -3622,6 +3687,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 					makeWorkerAgent: childFactory,
 					...authorizeNestedMessage ? { authorizeDownMessage: authorizeNestedMessage } : {},
 					perWorker: nestedPerWorker,
+					...options.reservationPolicy ? { preserveOwnerTurns: true } : {},
 					...options.router ? { router: options.router } : {},
 					...nestedDriveHarness ? { driveHarness: nestedDriveHarness } : {},
 					...options.coordination && isExternalSupervisor(authorized) ? { coordination: options.coordination } : {},
@@ -3648,6 +3714,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 					...spawnPreflight ? { preflightSpawn: spawnPreflight } : {},
 					...options.resolveSpawnProfile ? { resolveSpawnProfile: options.resolveSpawnProfile } : {},
 					...composeSpawnProfile ? { composeSpawnProfile } : {},
+					...profileTable ? { profiles: profileTable } : {},
 					...options.peerMail ? { peerMail: options.peerMail } : {},
 					...options.stopRule ? { stopRule: options.stopRule } : {},
 					...options.onProgressStop ? { onProgressStop: options.onProgressStop } : {},
@@ -3709,6 +3776,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 	};
 	const workerFactory = makeWorkerAgent;
 	const start = async () => {
+		await verifyProfilePromotions(profileTable);
 		const priorCoordination = log ? await log.load(runId, rootOwnerId) : void 0;
 		const authorizeRootMessage = authorizeDownFor(canonicalProfile, 1);
 		const agentDeps = {
@@ -3716,6 +3784,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 			makeWorkerAgent: workerFactory,
 			...authorizeRootMessage ? { authorizeDownMessage: authorizeRootMessage } : {},
 			perWorker,
+			...options.reservationPolicy ? { preserveOwnerTurns: true } : {},
 			...log ? { onEvent: (_event, record) => log.append(runId, record, rootOwnerId) } : {},
 			...deliverable ? { deliverable } : {},
 			onProviderModel(model) {
@@ -3727,6 +3796,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 			...spawnPreflight ? { preflightSpawn: spawnPreflight } : {},
 			...options.resolveSpawnProfile ? { resolveSpawnProfile: options.resolveSpawnProfile } : {},
 			...composeSpawnProfile ? { composeSpawnProfile } : {},
+			...profileTable ? { profiles: profileTable } : {},
 			...spawnResourceRoot === void 0 ? {} : { spawnResourceRoot },
 			...options.peerMail ? { peerMail: options.peerMail } : {},
 			...options.maxLiveWorkers !== void 0 ? { maxLiveWorkers: options.maxLiveWorkers } : {},
@@ -3806,6 +3876,7 @@ function superviseInternal(profile, task, opts, testBrain) {
 			...options.retainedAtSettlement !== void 0 ? { retainedAtSettlement: options.retainedAtSettlement } : {},
 			ownerWorkspaceRetention: managerBackend?.backend === "provider" && managerBackend.workspaceRetention !== void 0,
 			...options.maxLiveWorkers !== void 0 ? { maxLiveWorkers: options.maxLiveWorkers } : {},
+			...options.reservationPolicy ? { reservationPolicy: options.reservationPolicy } : {},
 			...probes ? { probes } : {},
 			...ctx.resume === true ? { resume: true } : {},
 			...options.now ? { now: options.now } : {},
@@ -3880,6 +3951,6 @@ function rootProviderModelEvidenceFromExecution(evidence) {
 	return evidence ?? rootProviderModelEvidence([]);
 }
 //#endregion
-export { readRootStreamReceipt as _, workerFromBackend as a, gateOnDeliverable as b, retryPreSpawnRefusals as c, coordinationProfileToolPrefix as d, resolveSupervisorProfile as f, readRootStream as g, ROOT_STREAM_FILE as h, superviseWithTestBrain as i, withWorkerSpawnRetry as l, supervisorAgentWithTestBrain as m, profileGuidanceComposer as n, isPreSpawnExecutorFailure as o, supervisorAgent as p, supervise as r, resolveWorkerSpawnRetry as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, assertCoordinationBinding as u, createSupervisorSpanRecorder as v, mapExecutorResult as x, serveCoordinationMcp as y };
+export { mapExecutorResult as S, readRootStream as _, superviseWithTestBrain as a, serveCoordinationMcp as b, resolveWorkerSpawnRetry as c, assertCoordinationBinding as d, coordinationProfileToolPrefix as f, ROOT_STREAM_FILE as g, supervisorAgentWithTestBrain as h, superviseRootProfile as i, retryPreSpawnRefusals as l, supervisorAgent as m, profileGuidanceComposer as n, workerFromBackend as o, resolveSupervisorProfile as p, supervise as r, isPreSpawnExecutorFailure as s, DEFAULT_AUTHORED_PROFILE_SECURITY_POLICY as t, withWorkerSpawnRetry as u, readRootStreamReceipt as v, gateOnDeliverable as x, createSupervisorSpanRecorder as y };
 
-//# sourceMappingURL=supervise-DsQjhLN-.js.map
+//# sourceMappingURL=supervise-1QzYAyS2.js.map